USA PTP 1 Final|100% Complete and Correct
Joint Commission
Accredits and certifies healthcare organizations and programs in the united states
When was HIPAA enacted?
1996
HIPAA regulations were designed to:
1) Protect individuals' rights to privacy and confidentiality
2) Assure the security of electronic transfer of personal information
3)Allow insurance portability between change of jobs
Title 1 of HIPAA
maintain insurance coverage when changing jobs
Title 2 of HIPAA
Focus on preventing fraud and safeguarding patient privacy and PHI
Why HIPAA - Technology
As information is quickly and sometimes loosely moved around networks, HIPAA standards will hold
violators accountable for accidental or intentional 'interception' of protected health information
(PHI).
Why HIPAA - Genetic Advancements
As more is known about our genetic predisposition to diseases, HIPAA will ensure that, for example,
an
individual is not denied insurance because the company knows that she may eventually develop MS
Why HIPAA - Marketing
As information is more easily captured concerning, for example, the prescriptions we purchase, HIPAA
is designed to prevent marketing of unsolicited products or services based on harvested marketing
data
Agency that oversees HIPAA
health and human services office for civil rights
PHI
Protected Health Information. This is any data about the patient that would tend to identify the
individual: name, hospital #, SSN, diagnosis, lab results, past or current photos, etc
De-identified Data
Protected health information that does not
identify an individual; there is no reasonable basis to believe that the information can be used to
identify an individual. (not the same as PHI) It is health info data from medical record that has been
stripped of "all direct identifiers" ie. names, SS, Phone Number etc...)
, Release/Disclosure
These are terms used in describing the release of PHI to other CEs for TPO, treatment. payment, or
health care operations.
Accounting of Disclosure (AOD)
The patient has the right to have an AODs for his PHI or PMI.
Directory
This is CE's census or list of patients used by volunteers and operators to direct visitors.
Patient's Rights
Individuals have the right to:
1. Receive notice of an agency's privacy practices.
2. Know that an agency will useits PHI ONLY for
treatment, payment, operations (TPO), certain other permitted uses and uses as required by law
3. Consent to and control the use and disclosure of their PHI.
4. Access their protected health information (PHI), except for psychotherapy notes (they might be
charged for copies)
5. Request amendment or addendum to their PHI (not always granted)
6. Receive accounting's of disclosures
7. File privacy complaints to agency officer
HIPAA Restricts Sharing PHI:
Per sonal information cannot be released to individuals or companies interested in marketing
ventures, without the patient's written permission.
Need to Know Principle
PHI should be shared with as few individuals as needed to ensure patient care and then only to the
extent demanded by the individual's role.
Consequences related to violation of HIPAA
Must notify patient, media, and office of health and human service
What Objectives do the Privacy Regulations Accomplish for Patients?
• Give patients more control over their health information.
• Set boundaries on the use and disclosure of health records.
• Establish appropriate safeguards for all people who participate in or are associated with the
provision of healthcare to ensure that they honor patients' rights to privacy of their PHI.
• Hold violators accountable through civil and criminal penalties.
• Strike a balance when public responsibility requires disclosure of some forms of data--for example,
to protect public health.
OSHA
Assures safe and healthful working conditions by enforcing standards and requiring employers to
inform workers about hazards, provide safety training to workers, keep records of injuries, and
provide required equipment
Joint Commission
Accredits and certifies healthcare organizations and programs in the united states
When was HIPAA enacted?
1996
HIPAA regulations were designed to:
1) Protect individuals' rights to privacy and confidentiality
2) Assure the security of electronic transfer of personal information
3)Allow insurance portability between change of jobs
Title 1 of HIPAA
maintain insurance coverage when changing jobs
Title 2 of HIPAA
Focus on preventing fraud and safeguarding patient privacy and PHI
Why HIPAA - Technology
As information is quickly and sometimes loosely moved around networks, HIPAA standards will hold
violators accountable for accidental or intentional 'interception' of protected health information
(PHI).
Why HIPAA - Genetic Advancements
As more is known about our genetic predisposition to diseases, HIPAA will ensure that, for example,
an
individual is not denied insurance because the company knows that she may eventually develop MS
Why HIPAA - Marketing
As information is more easily captured concerning, for example, the prescriptions we purchase, HIPAA
is designed to prevent marketing of unsolicited products or services based on harvested marketing
data
Agency that oversees HIPAA
health and human services office for civil rights
PHI
Protected Health Information. This is any data about the patient that would tend to identify the
individual: name, hospital #, SSN, diagnosis, lab results, past or current photos, etc
De-identified Data
Protected health information that does not
identify an individual; there is no reasonable basis to believe that the information can be used to
identify an individual. (not the same as PHI) It is health info data from medical record that has been
stripped of "all direct identifiers" ie. names, SS, Phone Number etc...)
, Release/Disclosure
These are terms used in describing the release of PHI to other CEs for TPO, treatment. payment, or
health care operations.
Accounting of Disclosure (AOD)
The patient has the right to have an AODs for his PHI or PMI.
Directory
This is CE's census or list of patients used by volunteers and operators to direct visitors.
Patient's Rights
Individuals have the right to:
1. Receive notice of an agency's privacy practices.
2. Know that an agency will useits PHI ONLY for
treatment, payment, operations (TPO), certain other permitted uses and uses as required by law
3. Consent to and control the use and disclosure of their PHI.
4. Access their protected health information (PHI), except for psychotherapy notes (they might be
charged for copies)
5. Request amendment or addendum to their PHI (not always granted)
6. Receive accounting's of disclosures
7. File privacy complaints to agency officer
HIPAA Restricts Sharing PHI:
Per sonal information cannot be released to individuals or companies interested in marketing
ventures, without the patient's written permission.
Need to Know Principle
PHI should be shared with as few individuals as needed to ensure patient care and then only to the
extent demanded by the individual's role.
Consequences related to violation of HIPAA
Must notify patient, media, and office of health and human service
What Objectives do the Privacy Regulations Accomplish for Patients?
• Give patients more control over their health information.
• Set boundaries on the use and disclosure of health records.
• Establish appropriate safeguards for all people who participate in or are associated with the
provision of healthcare to ensure that they honor patients' rights to privacy of their PHI.
• Hold violators accountable through civil and criminal penalties.
• Strike a balance when public responsibility requires disclosure of some forms of data--for example,
to protect public health.
OSHA
Assures safe and healthful working conditions by enforcing standards and requiring employers to
inform workers about hazards, provide safety training to workers, keep records of injuries, and
provide required equipment
